GitHub Advisoryadvisory · Maven

GHSA-33j4-8vcr-f79v Cross-site request forgery in Apache ActiveMQ

MEDIUM Published 2022-05-02 Modified 2023-12-21 Official page ↗
Aliases
CVE-2010-1244
Ecosystem
Maven
Packages
org.apache.activemq:activemq-parent
Severity
Moderate
Weaknesses
CWE-352
Reviewed
2023-12-21

Affected packages

• Maven org.apache.activemq:activemq-parent: < 5.3.1 → fixed in 5.3.1

Description

Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.

Related

Alias · CVE (1)

  • CVE-2010-1244 Cross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to… vulnerability

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References